CVEs published on December 18, 2025

260 vulnerabilities, ordered with the most urgent first.

6.6 Medium severity
SonicWall SMA1000 Missing Authorization Exploited
CVE-2025-40602Dec 18, 2025SonicWallEPSS 2.76%
6.1 Medium severity
RoundCube Webmail Cross-site Scripting Exploited
CVE-2025-68461Dec 18, 2025RoundcubeEPSS 27.4%
8.8 High severity
Firefox: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2025-14861Dec 18, 2025Mozilla
8.2 High severity
Office Out-of-Box Experience: Improper Neutralization of Input During Web Page Generation
CVE-2025-64677Dec 18, 2025Microsoft
8.0 High severity
WA850RE: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-14737Dec 18, 2025TP-Link
7.2 High severity
DIR-605: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2025-14884Dec 18, 2025D-LinkEPSS 10.8%
9.8 Critical severity
WH450: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2025-14879Dec 18, 2025TendaEPSS 6.66%
9.8 Critical severity
EasyPHP Webserver: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-53941Dec 18, 2025EasyPHPEPSS 6.39%
7.5 High severity
WA850RE: Improper Authentication
CVE-2025-14738Dec 18, 2025TP-Link
9.8 Critical severity
Dify: Use of Hard-coded Credentials
CVE-2025-56157Dec 18, 2025LangGenius
9.9 Critical severity
WordPress Contact Form 7 PDF, Google Sheet &…: Unrestricted Upload of File with Dangerous Type
CVE-2025-64231Dec 18, 2025RedefiningTheWeb
9.8 Critical severity
WH450: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2025-14878Dec 18, 2025Tenda
9.1 Critical severity
scrcpy: Deserialization of Untrusted Data
CVE-2025-34449Dec 18, 2025Genymobile
8.7 High severity
Streama: Improper Limitation of a Pathname to a Restricted Directory
CVE-2025-34452Dec 18, 2025StreamaEPSS 5.44%
9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2025-14877Dec 18, 2025CampCodes
8.9 High severity
Guardian: Improper Neutralization of Input During Web Page Generation
CVE-2025-40892Dec 18, 2025Nozomi Networks
9.4 Critical severity
WD-R608U: Improper Neutralization of Special Elements used in an OS Command
CVE-2025-65008Dec 18, 2025WODESYSEPSS 2.7%
8.8 High severity
tinacms: Improper Control of Generation of Code
CVE-2025-68278Dec 18, 2025Tinacms
9.9 Critical severity
Motors: Unrestricted Upload of File with Dangerous Type
CVE-2025-64374Dec 18, 2025StylemixThemes
9.1 Critical severity
Weblate is a web based localization tool.
CVE-2025-68398Dec 18, 2025WeblateOrg
9.8 Critical severity
EasyEat: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53433Dec 18, 2025AncoraThemes
9.8 Critical severity
Ollama: Missing Authentication for Critical Functionality
CVE-2025-63389Dec 18, 2025Ollama
9.3 Critical severity
H6056: Authorization Bypass Through User-Controlled Key
CVE-2025-10910Dec 18, 2025Govee
9.8 Critical severity
DentiCare: Deserialization of Untrusted Data
CVE-2025-54723Dec 18, 2025BoldThemes
9.8 Critical severity
Lunna: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58935Dec 18, 2025AxiomThemes
9.3 Critical severity
Advance Seat Reservation Management for…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-58951Dec 18, 2025Smartcms
9.8 Critical severity
WP Gravity Forms FreshDesk Plugin: Deserialization of Untrusted Data
CVE-2025-60089Dec 18, 2025CRM Perks
9.8 Critical severity
WP Gravity Forms Insightly: Deserialization of Untrusted Data
CVE-2025-60090Dec 18, 2025CRM Perks
9.8 Critical severity
WP Gravity Forms Zoho CRM and Bigin: Deserialization of Untrusted Data
CVE-2025-60091Dec 18, 2025CRM Perks
9.8 Critical severity
WP Gravity Forms Constant Contact Plugin: Deserialization of Untrusted Data
CVE-2025-60174Dec 18, 2025CRM Perks
9.8 Critical severity
WP Gravity Forms HubSpot: Deserialization of Untrusted Data
CVE-2025-60178Dec 18, 2025CRM Perks
9.8 Critical severity
WP Gravity Forms Salesforce: Deserialization of Untrusted Data
CVE-2025-60180Dec 18, 2025CRM Perks
9.8 Critical severity
Soledad: Incorrect Privilege Assignment
CVE-2025-64188Dec 18, 2025PenciDesign
9.8 Critical severity
Jannah: Deserialization of Untrusted Data
CVE-2025-64206Dec 18, 2025TieLabs
9.8 Critical severity
Client Invoicing by Sprout Invoices: Deserialization of Untrusted Data
CVE-2025-64227Dec 18, 2025BoldGrid
9.8 Critical severity
Codiqa: Deserialization of Untrusted Data
CVE-2025-64233Dec 18, 2025BoldThemes
9.8 Critical severity
Tuturn: Authentication Bypass Using an Alternate Path or Channel
CVE-2025-64236Dec 18, 2025AmentoTech
9.8 Critical severity
SoliClub: Use of Hard-coded Credentials
CVE-2025-7358Dec 18, 2025Utarit Informatics Services
9.1 Critical severity
Dify: Origin Validation Error
CVE-2025-63386Dec 18, 2025LangGenius
9.1 Critical severity
Dify: Origin Validation Error
CVE-2025-63388Dec 18, 2025LangGenius
8.1 High severity
Guardian: Improper Limitation of a Pathname to a Restricted Directory
CVE-2025-40898Dec 18, 2025Nozomi Networks
8.8 High severity
File Thingie: Unrestricted Upload of File with Dangerous Type
CVE-2023-53942Dec 18, 2025Leefish
8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-13641Dec 18, 2025Smub
8.8 High severity
Demo Importer Plus: Missing Authorization
CVE-2025-14364Dec 18, 2025Kraftplugins
8.8 High severity
RuoYi: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2025-14856Dec 18, 2025Y Project
8.8 High severity
Client Database Management System: Improper Access Control
CVE-2025-14885Dec 18, 2025SourceCodester
9.3 Critical severity
tPlayer: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-60062Dec 18, 2025Mmetrodw
8.8 High severity
Ransomware Containment: Unprotected Alternate Channel
CVE-2025-62001Dec 18, 2025BullWall
8.7 High severity
WD-R608U: Missing Authentication for Critical Functionality
CVE-2025-65007Dec 18, 2025WODESYS
9.1 Critical severity
Hotel Booking Lite: Improper Control of Generation of Code
CVE-2025-66078Dec 18, 2025Jetmonsters
7.8 High severity
rtl_433: Out-of-bounds Write
CVE-2025-34450Dec 18, 2025Merbanan
7.8 High severity
proxychains-ng: Out-of-bounds Write
CVE-2025-34451Dec 18, 2025Rofl0r
7.8 High severity
LabVIEW: Out-of-bounds Write
CVE-2025-64461Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64462Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64463Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64464Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64465Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64466Dec 18, 2025NI
7.8 High severity
LabVIEW: Out-of-bounds Read
CVE-2025-64467Dec 18, 2025NI
7.8 High severity
LabVIEW: Use After Free
CVE-2025-64468Dec 18, 2025NI
7.8 High severity
LabVIEW: Stack-based Buffer Overflow
CVE-2025-64469Dec 18, 2025NI
9.0 Critical severity
WP Webhooks: Unrestricted Upload of File with Dangerous Type
CVE-2025-66074Dec 18, 2025Cozmoslabs
8.8 High severity
Hotel Listing: Incorrect Privilege Assignment
CVE-2025-58710Dec 18, 2025E-plugins
8.8 High severity
Sale! Immigration law, Visa services support…: Incorrect Privilege Assignment
CVE-2025-59134Dec 18, 2025Jthemes
8.8 High severity
PDF for Contact Form 7: Deserialization of Untrusted Data
CVE-2025-60081Dec 18, 2025Add-ons.org
8.8 High severity
PDF for WPForms: Deserialization of Untrusted Data
CVE-2025-60082Dec 18, 2025Add-ons.org
8.8 High severity
PDF Invoice Builder for WooCommerce: Deserialization of Untrusted Data
CVE-2025-60083Dec 18, 2025Add-ons.org
8.8 High severity
PDF for Elementor Forms + Drag And Drop…: Deserialization of Untrusted Data
CVE-2025-60084Dec 18, 2025Add-ons.org
8.8 High severity
Booking and Rental Manager: Deserialization of Untrusted Data
CVE-2025-64266Dec 18, 2025Magepeopleteam
7.5 High severity
kroki: Files or Directories Accessible to External Parties
CVE-2025-14896Dec 18, 2025Yuzutech
7.5 High severity
Open5gs: Reachable Assertion
CVE-2025-65559Dec 18, 2025Open5GS
7.5 High severity
Upf: NULL Pointer Dereference
CVE-2025-65566Dec 18, 2025Linux Foundation
8.2 High severity
LinkDing: Improper Neutralization of Input During Web Page Generation
CVE-2025-14202Dec 18, 2025Linkding
8.1 High severity
Ransomware Containment: Improperly Implemented Security Check for Standard
CVE-2025-62002Dec 18, 2025BullWall
7.3 High severity
arduino-ide: Incorrect Default Permissions
CVE-2025-64724Dec 18, 2025Arduino
8.5 High severity
PopupKit: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-14314Dec 18, 2025Roxnor
8.5 High severity
Traveler: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-64371Dec 18, 2025ShineTheme
7.8 High severity
Hubstaff: Uncontrolled Search Path Element
CVE-2023-53937Dec 18, 2025Hubstaff
7.8 High severity
Codigo Markdown Editor: Improper Control of Generation of Code
CVE-2023-53940Dec 18, 2025Alfonzm
7.5 High severity
nodemailer: Improper Check or Handling of Exceptional Conditions
CVE-2025-14874Dec 18, 2025Nodemailer
7.5 High severity
myhoard: Transmission of Private Resources into a New Sphere
CVE-2025-67745Dec 18, 2025Aiven-Open
8.1 High severity
ShieldGroup: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49359Dec 18, 2025AncoraThemes
8.1 High severity
Militarology: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49360Dec 18, 2025AncoraThemes
8.1 High severity
Mamita: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49361Dec 18, 2025AncoraThemes
8.1 High severity
Gracioza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49362Dec 18, 2025AncoraThemes
8.1 High severity
Kings & Queens: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49363Dec 18, 2025AncoraThemes
8.1 High severity
Hanani: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49366Dec 18, 2025AncoraThemes
8.1 High severity
Monyxi: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49367Dec 18, 2025AncoraThemes
8.1 High severity
Lymcoin: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49370Dec 18, 2025AncoraThemes
8.1 High severity
Strux: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49371Dec 18, 2025AncoraThemes
8.1 High severity
Farm Agrico: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-52745Dec 18, 2025AncoraThemes
8.1 High severity
Faith & Hope: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-52768Dec 18, 2025AncoraThemes
8.1 High severity
Emberlyn: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53431Dec 18, 2025AncoraThemes
8.1 High severity
Echo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53432Dec 18, 2025AncoraThemes
8.1 High severity
Plan My Day: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53435Dec 18, 2025AxiomThemes
8.1 High severity
Monki: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53436Dec 18, 2025BZOTheme
8.1 High severity
Greeny: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53441Dec 18, 2025AxiomThemes
8.1 High severity
Rentic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53442Dec 18, 2025AxiomThemes
8.1 High severity
Beautique: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53446Dec 18, 2025AxiomThemes
8.1 High severity
Assembly: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53447Dec 18, 2025AxiomThemes
8.1 High severity
Hygia: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53453Dec 18, 2025AxiomThemes
8.1 High severity
Paragon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58225Dec 18, 2025AxiomThemes
8.1 High severity
Algenix: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58803Dec 18, 2025AxiomThemes
8.1 High severity
The Flash: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58888Dec 18, 2025AncoraThemes
8.1 High severity
Sanger: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58891Dec 18, 2025AncoraThemes
8.1 High severity
Tourimo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58892Dec 18, 2025AncoraThemes
8.1 High severity
Otaku: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58896Dec 18, 2025AncoraThemes
8.1 High severity
HealthHub: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58898Dec 18, 2025AncoraThemes
8.1 High severity
UniTravel: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58900Dec 18, 2025AncoraThemes
8.1 High severity
Critique: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58923Dec 18, 2025AxiomThemes
8.1 High severity
Cerebrum: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58926Dec 18, 2025AxiomThemes
8.1 High severity
Stallion: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58927Dec 18, 2025AxiomThemes
8.1 High severity
Heart: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58928Dec 18, 2025AxiomThemes
8.1 High severity
FitFlex: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58930Dec 18, 2025AxiomThemes
8.1 High severity
The Gig: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58934Dec 18, 2025AxiomThemes
8.1 High severity
Basil: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58940Dec 18, 2025AxiomThemes
8.1 High severity
Dwell: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58942Dec 18, 2025AxiomThemes
8.1 High severity
Agricola: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58943Dec 18, 2025AxiomThemes
8.1 High severity
Manufactory: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58944Dec 18, 2025AxiomThemes
8.1 High severity
Aromatica: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58948Dec 18, 2025AxiomThemes
8.1 High severity
Lione: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58950Dec 18, 2025AxiomThemes
8.1 High severity
Ludos Paradise: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49364Dec 18, 2025AncoraThemes
8.1 High severity
Jack Well: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49365Dec 18, 2025AncoraThemes
8.1 High severity
Palladio: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49368Dec 18, 2025AncoraThemes
8.1 High severity
Lettuce: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49369Dec 18, 2025AncoraThemes
8.1 High severity
GlamChic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49941Dec 18, 2025AncoraThemes
8.1 High severity
Gardis: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49942Dec 18, 2025AncoraThemes
8.1 High severity
Femme: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49943Dec 18, 2025AncoraThemes
8.1 High severity
Exit Game: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53429Dec 18, 2025AncoraThemes
8.1 High severity
Etta: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53430Dec 18, 2025AncoraThemes
8.1 High severity
ChildHope: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53434Dec 18, 2025AncoraThemes
8.1 High severity
Greenorganic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53437Dec 18, 2025ApusTheme
8.1 High severity
FitLine: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53438Dec 18, 2025AxiomThemes
8.1 High severity
Harper: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53439Dec 18, 2025AxiomThemes
8.1 High severity
Smash: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53443Dec 18, 2025AxiomThemes
8.1 High severity
Catwalk: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53445Dec 18, 2025AxiomThemes
8.1 High severity
Rally: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53448Dec 18, 2025AxiomThemes
8.1 High severity
Convex: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-53449Dec 18, 2025AxiomThemes
8.1 High severity
Woo Hoo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58706Dec 18, 2025AxiomThemes
8.1 High severity
777: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58708Dec 18, 2025AxiomThemes
8.1 High severity
Legacy: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58709Dec 18, 2025AxiomThemes
8.1 High severity
Festy: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58879Dec 18, 2025AncoraThemes
8.1 High severity
Pathfinder: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58885Dec 18, 2025AncoraThemes
8.1 High severity
Towny: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58889Dec 18, 2025AxiomThemes
8.1 High severity
Playful: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58890Dec 18, 2025AncoraThemes
8.1 High severity
Alright: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58893Dec 18, 2025AxiomThemes
8.1 High severity
Good Mood: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58894Dec 18, 2025AxiomThemes
8.1 High severity
Integro: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58895Dec 18, 2025AncoraThemes
8.1 High severity
Frame: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58899Dec 18, 2025AncoraThemes
8.1 High severity
Takeout: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58901Dec 18, 2025AncoraThemes
8.1 High severity
Neptunus: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58925Dec 18, 2025AxiomThemes
8.1 High severity
Pantry: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58929Dec 18, 2025AxiomThemes
8.1 High severity
Palatio: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58931Dec 18, 2025AxiomThemes
8.1 High severity
Prisma: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58932Dec 18, 2025AxiomThemes
8.1 High severity
Anubis: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58933Dec 18, 2025AxiomThemes
8.1 High severity
Catamaran: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58936Dec 18, 2025AxiomThemes
8.1 High severity
Tacticool: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58937Dec 18, 2025AxiomThemes
8.1 High severity
Fabric: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58941Dec 18, 2025AxiomThemes
8.1 High severity
EcoGrow: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58945Dec 18, 2025AxiomThemes
8.1 High severity
Vocal: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58946Dec 18, 2025AxiomThemes
8.1 High severity
Athos: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58947Dec 18, 2025AxiomThemes
8.1 High severity
Spock: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-58949Dec 18, 2025AxiomThemes
8.1 High severity
Chinchilla: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60042Dec 18, 2025AncoraThemes
8.1 High severity
Wanderic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60043Dec 18, 2025AncoraThemes
8.1 High severity
Fribbo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60044Dec 18, 2025AncoraThemes
8.1 High severity
HeartStar: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60046Dec 18, 2025AxiomThemes
8.1 High severity
IPharm: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60047Dec 18, 2025AxiomThemes
8.1 High severity
Tripster: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60048Dec 18, 2025AxiomThemes
8.1 High severity
Soleil: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60049Dec 18, 2025AxiomThemes
8.1 High severity
Panda: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60050Dec 18, 2025AxiomThemes
8.1 High severity
Rare Radio: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60051Dec 18, 2025AncoraThemes
8.1 High severity
W&D: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60052Dec 18, 2025AncoraThemes
8.1 High severity
MaxCube: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60053Dec 18, 2025AncoraThemes
8.1 High severity
OnLeash: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60054Dec 18, 2025AncoraThemes
8.1 High severity
Fabrica: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60055Dec 18, 2025AncoraThemes
8.1 High severity
Winger: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60056Dec 18, 2025AncoraThemes
8.1 High severity
DJ Rainflow: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60057Dec 18, 2025AncoraThemes
8.1 High severity
DetailX: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60058Dec 18, 2025AncoraThemes
8.1 High severity
smart SEO: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60059Dec 18, 2025AxiomThemes
8.1 High severity
Pubzinne: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60060Dec 18, 2025AxiomThemes
8.1 High severity
Kicker: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60061Dec 18, 2025AxiomThemes
8.1 High severity
Rosalinda: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60063Dec 18, 2025AxiomThemes
8.1 High severity
Renewal: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60064Dec 18, 2025AxiomThemes
8.1 High severity
Pinevale: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60065Dec 18, 2025AxiomThemes
8.1 High severity
Katelyn: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60066Dec 18, 2025AxiomThemes
8.1 High severity
Giardino: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60067Dec 18, 2025AxiomThemes
8.1 High severity
MinimogWP: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60069Dec 18, 2025ThemeMove
8.1 High severity
Riode: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60071Dec 18, 2025Don-themes
8.1 High severity
Anchor smooth scroll: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-60072Dec 18, 2025Processby
8.1 High severity
Inset: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-6326Dec 18, 2025AncoraThemes
8.1 High severity
Jannah: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-64205Dec 18, 2025TieLabs
8.1 High severity
PenNews: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-64223Dec 18, 2025PenciDesign
8.1 High severity
Traveler: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-64373Dec 18, 2025ShineTheme
8.1 High severity
ListingPro: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-64377Dec 18, 2025CridioStudio
7.5 High severity
Twittodon: Deserialization of Untrusted Data
CVE-2025-63950Dec 18, 2025Tomaszdunia
7.5 High severity
Phoniebox: Deserialization of Untrusted Data
CVE-2025-63951Dec 18, 2025Sourcefabric
7.5 High severity
Free5gc: Improper Validation of Array Index
CVE-2025-65562Dec 18, 2025Free5gc
7.5 High severity
com.palantir.compute:compute-service: Improper Isolation or Compartmentalization
CVE-2025-53710Dec 18, 2025Palantir
7.5 High severity
Server Intrusion Protection: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-62003Dec 18, 2025BullWall
7.5 High severity
Server Intrusion Protection: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-62004Dec 18, 2025BullWall

CVEs published on December 18, 2025

SonicWall SMA1000 Missing Authorization Exploited

RoundCube Webmail Cross-site Scripting Exploited